Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
File:                     PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft (raw, json)
Hash identifier:          C9/GQPpl656oF/PA2UOfTM8JYH29HSpXCshldAQFJuY=
Subject key identifier:   9D:14:32:2A:C4:9E:4D:AA:91:0D:5D:A3:B6:C4:2E:28:ED:EE:F8:1B
Authority key identifier: 3D:23:75:8D:FB:6F:1D:43:DC:D6:4D:0F:0A:B2:7E:F7:15:13:59:52
Certificate issuer:       /CN=3d23758dfb6f1d43dcd64d0f0ab27ef715135952
Certificate serial:       019356BFBDF4BBCF7B5500FA61FCA8006A10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
Manifest number:          0250
Signing time:             Sat 23 Nov 2024 02:00:26 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:26 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:26 +0000
Files and hashes:         1: E338zGdXiRW1OvOYkR4UK-nzOyA.roa (hash: 3Xv5A7MXPITCFs5yFaXu7gR2F124U+WV+I7E3edZbLI=)
                          2: PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl (hash: 8XjS2ItMsXXjngMl1HPTKiWev6MUYMalD7IT576Kzh0=)
                          3: VlTT1dy1WFmzngAIOt6eOU4ruW0.roa (hash: bZrtircxafkqX3jF8nkc2hevazawX9YP7K68mamd7eg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:bd:f4:bb:cf:7b:55:00:fa:61:fc:a8:00:6a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d23758dfb6f1d43dcd64d0f0ab27ef715135952
        Validity
            Not Before: Nov 23 02:00:26 2024 GMT
            Not After : Nov 24 02:00:26 2024 GMT
        Subject: CN=9d14322ac49e4daa910d5da3b6c42e28edeef81b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b5:39:f7:e7:a6:8c:86:74:10:78:fb:36:79:
                    9b:1b:e2:5d:5a:1c:c8:11:46:8f:f3:2f:ed:22:eb:
                    b7:d5:3d:c4:92:de:d3:b3:a0:97:20:e4:28:c5:1a:
                    9b:c9:39:18:66:d5:9e:04:c8:33:fc:66:2e:76:fe:
                    ae:ba:76:c7:b0:c3:0c:cf:7c:af:23:a0:e5:58:e5:
                    de:1b:50:be:df:b4:7c:45:14:e6:37:e8:b8:a9:16:
                    d6:88:7d:a1:18:0d:10:06:be:a1:33:b8:00:49:24:
                    cd:00:76:82:de:0a:33:00:bf:7d:e3:1d:42:b3:f5:
                    6a:1a:2c:aa:86:f8:f2:d1:86:24:07:0d:02:41:25:
                    45:c0:10:4a:cc:eb:a3:4c:e8:f9:4a:15:25:2b:0c:
                    16:00:7f:2c:43:51:b9:34:97:4e:7a:75:c3:03:09:
                    6d:bf:f7:5c:ff:1d:3b:38:4d:06:e1:0c:a9:45:64:
                    be:98:89:5a:57:ae:b1:a3:ef:f7:51:59:b9:3f:fd:
                    2b:3a:09:df:6a:1f:b5:dd:d8:a4:ab:8c:35:53:2f:
                    3a:cd:32:31:a3:2e:c0:1f:0e:c8:17:f9:8c:9d:d9:
                    58:ff:9a:aa:52:65:95:1b:fb:f2:ed:f3:4c:eb:4f:
                    fe:d4:31:80:b1:8e:cf:9c:4f:71:82:d3:3b:f5:8f:
                    a4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:14:32:2A:C4:9E:4D:AA:91:0D:5D:A3:B6:C4:2E:28:ED:EE:F8:1B
            X509v3 Authority Key Identifier:
                keyid:3D:23:75:8D:FB:6F:1D:43:DC:D6:4D:0F:0A:B2:7E:F7:15:13:59:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:12:1a:6f:eb:e3:bd:80:47:eb:02:6a:6d:e8:6b:be:84:83:
         26:39:0e:0b:38:b1:57:7f:53:67:75:32:da:98:06:2d:34:b6:
         f2:b4:b1:d0:76:5a:f2:ee:51:a8:8e:42:16:de:4e:1c:7a:f8:
         5d:d0:51:2e:ae:df:e8:4f:27:27:2f:50:c7:b9:51:a6:fc:ab:
         d3:39:62:12:de:1e:e6:1b:f6:45:8b:e6:28:4d:de:c7:d9:ad:
         96:18:23:ea:21:0b:d5:fe:99:6a:4e:64:e7:b9:ff:04:13:92:
         ec:5e:c4:20:e1:48:5c:da:64:05:08:96:9e:ed:24:ff:93:02:
         78:91:fc:38:47:db:fa:0b:54:fb:42:fe:b8:6c:68:b5:7e:f3:
         63:9d:64:c5:8d:ae:4a:b1:d4:df:81:e5:6b:fe:42:68:15:3c:
         ee:38:48:f8:2d:50:99:73:ce:a6:cc:e4:59:4a:0f:a5:89:d8:
         59:13:dc:48:6d:a9:0b:e6:e1:bf:b5:05:6a:7d:49:ac:4c:21:
         b9:3f:c8:98:a4:6a:ca:fe:91:b2:eb:4c:44:18:66:91:68:07:
         2e:e8:29:9a:87:78:6e:c0:5f:d2:25:57:64:26:4b:42:a6:01:
         60:3f:62:69:2c:6d:b3:20:49:91:d8:db:aa:57:a8:ab:46:6b:
         cc:c8:7e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:41:34 2024 by rpki-client on console-ams.rpki-client.org